SODOLA SL902-SWTGW124AS Default Credentials Vulnerability Allowing Administrative Access

A default credentials vulnerability has been identified in the SODOLA SL902-SWTGW124AS firmware versions through 200.1.20. This vulnerability allows remote attackers to gain administrative access to the management interface by using hardcoded default credentials. The lack of password change enforcement enables full administrative control of the device.

Impact

Exploitation of this vulnerability allows for unauthorized administrative access to the device, enabling full control over its management interface and functions.

Remediation

Users can upgrade to the latest firmware version, which is available on the SODOLA website. Instructions for upgrading the firmware are included in the SODOLA Managed Switch Web Manual.